Static task
static1
Behavioral task
behavioral1
Sample
9e9ba45979a016a28d1a0c8584cd340a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9e9ba45979a016a28d1a0c8584cd340a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
9e9ba45979a016a28d1a0c8584cd340a_JaffaCakes118
-
Size
3.1MB
-
MD5
9e9ba45979a016a28d1a0c8584cd340a
-
SHA1
fed567fcfa4527c60d6a11d7fc23d17ecb4e75d7
-
SHA256
4efcc4f14a7cf765043b3bad799abbbb8eaee4dd659a5484d3d8397b10d5e902
-
SHA512
6bd296f6f18434a36354b94d484590700fb313f49c2ed3d0ed766cc0d21584da2e417cf0ff0ace5cad3424eafee3fd1c87835cf191b4406be345f2f8b7eb6efa
-
SSDEEP
24576:dz/Lq0SmMCUq4BVjMavdAiUgf6kQfhfAJ/wS1aBZ:dzzhSHDLqW+Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9e9ba45979a016a28d1a0c8584cd340a_JaffaCakes118
Files
-
9e9ba45979a016a28d1a0c8584cd340a_JaffaCakes118.exe windows:5 windows x86 arch:x86
dc359770a578d65778dec2e40e1f0881
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW
oleaut32
SysAllocStringLen
CreateErrorInfo
GetErrorInfo
VarBoolFromStr
VarBstrFromBool
VarBstrFromDate
VarBstrFromCy
VarCyFromStr
VariantCopyInd
SysFreeString
SysStringLen
SafeArrayRedim
SafeArrayGetLBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayPtrOfIndex
VariantClear
VariantCopy
user32
GetMessagePos
IsIconic
SendDlgItemMessageW
CreatePopupMenu
DestroyMenu
CheckMenuItem
TrackPopupMenu
EndMenu
DrawIcon
SetActiveWindow
AdjustWindowRectEx
InflateRect
PtInRect
SetScrollInfo
EnumDisplayDevicesW
GetMonitorInfoW
EnumDisplayMonitors
DdeSetUserHandle
EnableWindow
shell32
CommandLineToArgvW
SHGetMalloc
SHGetPathFromIDListW
SHCreateDirectoryExW
SHGetSpecialFolderLocation
SHChangeNotify
SHBindToParent
DragQueryFileW
kernel32
CreateFileW
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapSize
OutputDebugStringW
RtlUnwind
LoadLibraryExW
HeapFree
LeaveCriticalSection
GetCPInfo
IsValidCodePage
IsDebuggerPresent
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetStartupInfoW
DeleteCriticalSection
VirtualAlloc
HeapAlloc
HeapReAlloc
GetEnvironmentStringsW
EnterCriticalSection
GetFileSize
ReadFile
SetEndOfFile
SetFilePointer
WaitCommEvent
MulDiv
GetSystemInfo
SystemTimeToFileTime
FileTimeToSystemTime
lstrcmpiW
GetTempPathW
GetFileAttributesExW
CopyFileW
GetVersionExW
CreateJobObjectW
GetACP
GetOEMCP
CompareStringW
GetStringTypeW
GetCommandLineW
RaiseException
IsProcessorFeaturePresent
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
winspool.drv
FreePrinterNotifyInfo
Sections
.text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 599KB - Virtual size: 7.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.e6ied Size: 514KB - Virtual size: 514KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.3ng0 Size: 575KB - Virtual size: 574KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.07hl4s Size: 652KB - Virtual size: 652KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eaef6i Size: 361KB - Virtual size: 361KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 362KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ